Default settings for Exchange virtual directories

Summary: Learn about default settings for Client Access services on Mailbox servers in Exchange 2016.

Exchange 2016 automatically configures multiple Internet Information Services (IIS) virtual directories during installation. The tables that follow show the Exchange 2016 settings for the Client Access services on Mailbox servers and the default IIS authentication and Secure Sockets Layer (SSL) settings.

Client Access services on Mailbox servers

The following table lists the default settings on a stand-alone Exchange 2016 Mailbox server running Client Access services.

Default Mailbox server running Client Access services IIS authentication and SSL settings

Virtual directory Authentication method SSL settings Management method
Default website
Anonymous
Required
IIS management console
aspnet_client
Anonymous authentication
SSL required
Requires 128-bit encryption
IIS management console
Autodiscover
Anonymous authentication
Basic authentication
Windows authentication
SSL required
Requires 128-bit encryption
Exchange Management Shell
ecp
Anonymous authentication
Basic authentication
SSL required
Requires 128-bit encryption
Exchange admin center (EAC) or Exchange Management Shell
EWS
Anonymous authentication
Windows authentication
SSL required
Requires 128-bit encryption
Exchange Management Shell
Microsoft-Server-ActiveSync
Basic authentication
SSL required
Requires 128-bit encryption
EAC or Exchange Management Shell
OAB
Windows authentication
Not required
EAC or Exchange Management Shell
OWA
Basic authentication
SSL required
Requires 128-bit encryption
EAC or Exchange Management Shell
PowerShell
Anonymous authentication
Not required
Exchange Management Shell
Rpc
Basic authentication
Windows authentication
SSL required
Requires 128-bit encryption
Exchange Management Shell
RpcWithCert
By default, all authentication methods are disabled.
Required

Mailbox server

The following table lists the default settings on a stand-alone Exchange 2016 Mailbox server.

Default Mailbox server IIS authentication and SSL settings

Virtual directory Authentication method SSL settings Management method
Default website
Anonymous authentication
SSL required
Requires 128-bit encryption
This virtual directory can't be configured by the user.
PowerShell
Anonymous authentication
Not required
Exchange Management Shell

See also

Virtual directory management